Abstract: Aspects of the disclosure adapt internet protocol (IP) for heterogeneous internetworks. An IP packet is received into a source interface. The IP packet comprises an original header and an original payload, and a size of the IP packet exceeds a maximum payload size (MPS). Based on at least the MPS and the size of the IP packet, the IP packet is fragmented into a plurality of fragment payloads (for later reassembly), each of which does not exceed the MPS. A plurality of carrier packets is generated that each comprises an encapsulation header and one fragment payload, and which are transmitted over a downstream network to a destination interface. The source and destination interfaces may be overlay multilink network interface (OMNI) adaptation layer (OAL) interfaces. Example source interfaces use probing to determine a largest MPS supported by the downstream network. This reduces the number of fragments and improves network efficiency.

Abstract: Certain aspects of the present disclosure provide a method that comprises receiving, from a first node, a neighbor solicitation (NS) message via a virtual link, wherein the NS message is configured to provide an indication of a request to communicate with a second node, and request one or more communication parameters corresponding to the second node. The method can also include storing the indication of the request in a report list, and transmitting, via the virtual link, a neighbor advertisement (NA) message to the first node in response to the NS message, wherein the NA message comprises the one or more communication parameters corresponding to the second node.

Abstract: In an example, a method is described that comprises forming an MNP uniquely associated with the client aircraft. The method comprises embedding the MNP in a source address. The method additionally comprises sending a router solicitation message to a fixed router in a ground service network, wherein the router solicitation message comprises the source address. The method also comprises receiving, by the mobile router of the client aircraft from the fixed router in the ground service network, a router advertisement message, wherein the router advertisement message comprises configuration information for subsequent communications between the mobile router of the client aircraft and the fixed router. The method still further comprises determining, by the mobile router of the client aircraft, based on receiving the router advertisement message, that (i) the MNP of the client aircraft has been delegated and (ii) the client aircraft has permission to communicate over the ground service network.

Abstract: Certain aspects of the present disclosure provide a method that comprises receiving, from a first node, a neighbor solicitation (NS) message via a virtual link, wherein the NS message is configured to provide an indication of a request to communicate with a second node, and request one or more communication parameters corresponding to the second node. The method can also include storing the indication of the request in a report list, and transmitting, via the virtual link, a neighbor advertisement (NA) message to the first node in response to the NS message, wherein the NA message comprises the one or more communication parameters corresponding to the second node.

Abstract: An underwater communications system includes a network communication interface, one or more computer processors, and a memory containing computer program code that, when executed by operation of the one or more computer processors, performs an operation. The operation includes storing a plurality of data packets to be transmitted to a destination device, determining that data communications over the network communication interface have become available for a first network node, and determining that the first network node has a valid security credential. Additionally, the operation includes, upon determining that the first network node has the valid security credential, transmitting the stored plurality of data packets over the network communication interface to the first network node. The first network node is configured to employ store-carry-and-forward data messaging techniques to transmit the plurality of data packets towards the destination device.

Abstract: In an example, a method is described that comprises forming an MNP uniquely associated with the client aircraft. The method comprises embedding the MNP in a source address. The method additionally comprises sending a router solicitation message to a fixed router in a ground service network, wherein the router solicitation message comprises the source address. The method also comprises receiving, by the mobile router of the client aircraft from the fixed router in the ground service network, a router advertisement message, wherein the router advertisement message comprises configuration information for subsequent communications between the mobile router of the client aircraft and the fixed router. The method still further comprises determining, by the mobile router of the client aircraft, based on receiving the router advertisement message, that (i) the MNP of the client aircraft has been delegated and (ii) the client aircraft has permission to communicate over the ground service network.

Abstract: An underwater communications system includes a network communication interface, one or more computer processors, and a memory containing computer program code that, when executed by operation of the one or more computer processors, performs an operation. The operation includes storing a plurality of data packets to be transmitted to a destination device, determining that data communications over the network communication interface have become available for a first network node, and determining that the first network node has a valid security credential. Additionally, the operation includes, upon determining that the first network node has the valid security credential, transmitting the stored plurality of data packets over the network communication interface to the first network node. The first network node is configured to employ store-carry-and-forward data messaging techniques to transmit the plurality of data packets towards the destination device.

Abstract: An underwater communications system includes a network communication interface, one or more computer processors, and a memory containing computer program code that, when executed by operation of the one or more computer processors, performs an operation. The operation includes storing a plurality of data packets to be transmitted to a destination device, determining that data communications over the network communication interface have become available for a first network node, and determining that the first network node has a valid security credential that has not been revoked by an access granting authority. Additionally, the operation includes, upon determining that the first network node has the valid security credential, transmitting the stored plurality of data packets over the network communication interface to the first network node. The first network node is configured to employ store-carry-and-forward data messaging techniques to transmit the plurality of data packets towards the destination device.

Abstract: A system is provided for secure data transmission. The system stores a public master key, private decryption key and secure messaging module for securely transmitting and receiving a digital model data file for transmission via a work order message. For transmitting and receiving the work order message, the system generate public encryption keys using a key generation algorithm in which each of the public encryption keys are unique to a designated message recipient and generated using an input including the public master key, a validity period, and an identifier of the designated message recipient. The system may also store a revocation list that includes identifiers of message recipients that have revoked access to the public master key or private decryption key, and based thereon determine whether or not to encrypt and transmit the work order message, or receive and decrypt the work order message.

Abstract: An underwater communications system includes a network communication interface, one or more computer processors, and a memory containing computer program code that, when executed by operation of the one or more computer processors, performs an operation. The operation includes storing a plurality of data packets to be transmitted to a destination device, determining that data communications over the network communication interface have become available for a first network node, and determining that the first network node has a valid security credential that has not been revoked by an access granting authority. Additionally, the operation includes, upon determining that the first network node has the valid security credential, transmitting the stored plurality of data packets over the network communication interface to the first network node. The first network node is configured to employ store-carry-and-forward data messaging techniques to transmit the plurality of data packets towards the destination device.

Abstract: A system is provided for secure data transmission. The system stores a public master key, private decryption key and secure messaging module for securely transmitting and receiving a digital model data file for transmission via a work order message. For transmitting and receiving the work order message, the system generate public encryption keys using a key generation algorithm in which each of the public encryption keys are unique to a designated message recipient and generated using an input including the public master key, a validity period, and an identifier of the designated message recipient. The system may also store a revocation list that includes identifiers of message recipients that have revoked access to the public master key or private decryption key, and based thereon determine whether or not to encrypt and transmit the work order message, or receive and decrypt the work order message.

Abstract: A system is provided for secure data transmission. The system stores a public master key, private decryption key and secure messaging module for securely transmitting and receiving a digital model data file for transmission via a work order message. For transmitting and receiving the work order message, the system generate public encryption keys using a key generation algorithm in which each of the public encryption keys are unique to a designated message recipient and generated using an input including the public master key, a validity period, and an identifier of the designated message recipient. The system may also store a revocation list that includes identifiers of message recipients that have revoked access to the public master key or private decryption key, and based thereon determine whether or not to encrypt and transmit the work order message, or receive and decrypt the work order message.

Abstract: A system is provided for secure data transmission. The system stores a public master key, private decryption key and secure messaging module for securely transmitting and receiving a digital model data file for transmission via a work order message. For transmitting and receiving the work order message, the system generate public encryption keys using a key generation algorithm in which each of the public encryption keys are unique to a designated message recipient and generated using an input including the public master key, a validity period, and an identifier of the designated message recipient. The system may also store a revocation list that includes identifiers of message recipients that have revoked access to the public master key or private decryption key, and based thereon determine whether or not to encrypt and transmit the work order message, or receive and decrypt the work order message.

Abstract: A method for managing network traffic is described which includes receiving a traffic engineering specification at a Server from a Client, receiving a communication at the Server, a destination of the communication being the Client, and sending the communication from the Server to the Client via a tunnel virtual interface configured over one or more of Internet service provider (ISP) connections associated with the Client based on the traffic engineering specification, the tunnel virtual interface being a point of connection to a tunnel virtual network link.

Abstract: A method for managing network traffic is described which includes receiving a traffic engineering specification at a Server from a Client, receiving a communication at the Server, a destination of the communication being the Client, and sending the communication from the Server to the Client via a tunnel virtual interface configured over one or more of Internet service provider (ISP) connections associated with the Client based on the traffic engineering specification, the tunnel virtual interface being a point of connection to a tunnel virtual network link.

Abstract: A proactive link-state routing protocol designed for mobile ad-hoc networks is disclosed, which provides hop-by-hop routing along shortest paths to each destination. Each node running the present protocol will compute a source tree (providing paths to all reachable nodes) based on partial topology information stored in its topology table. To minimize overhead, each node reports only “part” of its source tree to neighbors. The present invention employs a combination of periodic and differential updates to keep all neighbors informed of the reportable part of its source tree. The present invention performs neighbor discovery using “differential” HELLO messages that report only “changes” in the status of neighbors. This results in HELLO messages that are much smaller than those of other link-state routing protocols.

Abstract: A proactive link-state routing protocol designed for mobile ad-hoc networks is disclosed, which provides hop-by-hop routing along shortest paths to each destination. Each node running the present protocol will compute a source tree (providing paths to all reachable nodes) based on partial topology information stored in its topology table. To minimize overhead, each node reports only “part” of its source tree to neighbors. The present invention employs a combination of periodic and differential updates to keep all neighbors informed of the reportable part of its source tree. The present invention performs neighbor discovery using “differential” HELLO messages that report only “changes” in the status of neighbors. This results in HELLO messages that are much smaller than those of other link-state routing protocols.

Abstract: In a computer implemented method, packets are transparently and securely communicated between a trusted computer and an untrusted computer connected by a gateway. Each packet including a source address, a destination address and a payload. The gateway, according to rules stored in a configuration database, intercepts a packet received in an Internet protocol layer of the gateway. The packet has a source address of the trusted computer, a destination address of the untrusted computer and a first payload. The intercepted packet is diverted to a proxy server operating in an application protocol layer of the gateway. The intercepted packet is consumed by the proxy server, and the proxy server generates a second packet having a source address of the gateway and the destination address of the untrusted computer and the first payload. The second packet is sent to the untrusted computer to enable the trusted computer to communicate with the untrusted computer securely.